HCRG Care Group, a private healthcare company that competes for GP and other NHS contracts, has confirmed a data breach following a ransomware attack.